RE: [OzMOSS] FW: HTTP 403 Access problems
Well found. Might be worth blogging about -Original Message- From: Peter Milliner [EMAIL PROTECTED] To: listserver@ozMOSS.com 'listserver@ozMOSS.com' Sent: 26/11/07 8:53 AM Subject: [OzMOSS] FW: HTTP 403 Access problems Hello all, Thanks for all the advice. I have tracked down problem. The old adage should have looked at simple solutions first. I took the advice and used filemon. I found the file called C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\TEMPLATE\FEATURES\TSATypes\fields.xml did not have correct permissions. It seems as though when adding solution for Learning Kit or SharePoint training solution the permissions for this file changed. Most probably by human error not SharePoint. It only affected main site because that was the site these features had been added to. Further investigation and it seems as thought the file had been backed up due to changes and cut and pasted instead of copy and pasted. Thankyou again for all your input (and sorry for sending you on a bit of wild goose chase) Regards Peter M. Bendigo TAFE. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mick Badran Sent: Sunday, 25 November 2007 6:34 PM To: listserver@ozMOSS.com Subject: [OzMOSS] FW: HTTP 403 Access problems Peter - I was thinking about whether this is a Sharepoint thing or an IIS thing on the site. Are you able to copy (a) just a plain HTML file to the site in question (just on the filesystem), and successfully access it from the browser. (b) just a plain *.ASPX file (same as above) ?? Also - if you create a new Sharepoint Web App, grab the 'newly' created web.config for that Sharepoint Web App and copy it to the one in question - just to see if it's something in the Web.Config. I'm putting my thinking cap on from afar. :-) From: [EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Peter Milliner [EMAIL PROTECTED] Sent: Friday, 23 November 2007 12:09 PM To: listserver@ozMOSS.com Subject: RE: [OzMOSS] FW: HTTP 403 Access problems Clayton, Mick, I had tried this earlier but still got 403 message. Peter M. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mick Badran Sent: Friday, 23 November 2007 11:12 AM To: listserver@ozMOSS.com Subject: [OzMOSS] FW: HTTP 403 Access problems CJ - why wouldn't this sympton be across all of the sites on the box? (sharepoint web apps etc.?) From: [EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Clayton James [EMAIL PROTECTED] Sent: Friday, 23 November 2007 11:06 AM To: listserver@ozMOSS.com Subject: RE: [OzMOSS] FW: HTTP 403 Access problems Hi Peter This seems to be an issue with a .Net framework security update. I have seen some comments explaining the same issue as yours the only solution I have read is to remove the framework update. MSFT support said to uninstall KB928365. You'll find this in the Add/Remove programs with Show updates checked off. It's one of the .NET Framework updates. Make sure that you do the uninstall when people are off the system...you'll also need to reboot after. So far so good, no HTTP 403 errors in two weeks. Hope this helps. Clayton James Data Cogs Information Technology| Mob 0402 463 276 From: [EMAIL PROTECTED] on behalf of Peter Milliner Sent: Fri 23/11/2007 10:05 AM To: listserver@ozMOSS.com Subject: FW: [OzMOSS] FW: HTTP 403 Access problems From: Peter Milliner Sent: Friday, 23 November 2007 8:39 AM To: 'listserver@ozMOSS.com' Subject: Re: [OzMOSS] FW: HTTP 403 Access problems Tried the suggestion from the link below but still no luck. Still getting HTTP 403 Forbidden Page. I can create new site collection and runs OK an another site collection I had created still runs under http://server/sites/teaching just not site collection I originally created under http://servername As stated previously the only addition I have made is installing the SharePoint Learner Kit and the SharePoint Training Solutions/features Does anybody have anymore suggestions. I have checked and double checked permissions. Below is an extract from IIS logs. Can anybody get anything from these 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 - 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 2 2148074254 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 - 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 BRITAFE\. 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 200 0 0 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET /Pages/Default.aspx - 80 BRITAFE\.. 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2
RE: [OzMOSS] FW: HTTP 403 Access problems
Clayton, Mick, I had tried this earlier but still got 403 message. Peter M. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mick Badran Sent: Friday, 23 November 2007 11:12 AM To: listserver@ozMOSS.com Subject: [OzMOSS] FW: HTTP 403 Access problems CJ - why wouldn't this sympton be across all of the sites on the box? (sharepoint web apps etc.?) From: [EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Clayton James [EMAIL PROTECTED] Sent: Friday, 23 November 2007 11:06 AM To: listserver@ozMOSS.com Subject: RE: [OzMOSS] FW: HTTP 403 Access problems Hi Peter This seems to be an issue with a .Net framework security update. I have seen some comments explaining the same issue as yours the only solution I have read is to remove the framework update. MSFT support said to uninstall KB928365. You'll find this in the Add/Remove programs with Show updates checked off. It's one of the .NET Framework updates. Make sure that you do the uninstall when people are off the system...you'll also need to reboot after. So far so good, no HTTP 403 errors in two weeks. Hope this helps. Clayton James Data Cogs Information Technology| Mob 0402 463 276 From: [EMAIL PROTECTED] on behalf of Peter Milliner Sent: Fri 23/11/2007 10:05 AM To: listserver@ozMOSS.com Subject: FW: [OzMOSS] FW: HTTP 403 Access problems From: Peter Milliner Sent: Friday, 23 November 2007 8:39 AM To: 'listserver@ozMOSS.com' Subject: Re: [OzMOSS] FW: HTTP 403 Access problems Tried the suggestion from the link below but still no luck. Still getting HTTP 403 Forbidden Page. I can create new site collection and runs OK an another site collection I had created still runs under http://server/sites/teaching just not site collection I originally created under http://servername As stated previously the only addition I have made is installing the SharePoint Learner Kit and the SharePoint Training Solutions/features Does anybody have anymore suggestions. I have checked and double checked permissions. Below is an extract from IIS logs. Can anybody get anything from these 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 - 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.432 2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 2 2148074254 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 - 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.432 2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 BRITAFE\. 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.432 2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 200 0 0 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET /Pages/Default.aspx - 80 BRITAFE\.. 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.432 2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 403 0 0 Assistance is appreciated Regards Peter Milliner From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Thake Sent: Thursday, 22 November 2007 3:00 PM To: listserver@ozmoss.com Subject: Re: [OzMOSS] FW: HTTP 403 Access problems Good link here: http://blogs.technet.com/jasbro/archive/2007/07/05/quickie-broken-web-pa rt-page-we-can-help.aspx On Nov 22, 2007 12:33 PM, Peter Milliner [EMAIL PROTECTED] wrote: Mick, Excuse me for being ignorant but if it is a web part how do I track down and remove or disable offending web part. I have tried permissions. Changing Application Pool account etc etc.. but still unable to access. I am also receiving message on http://server http://server/ and not being redirected. I get the same message if I put full url in with pages/default.aspx I can create other site collections from Central Admin with no problems (using team site template) Regards Peter Milliner Bendigo TAFE From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mick Badran Sent: Thursday, 22 November 2007 10:30 AM To: listserver@ozMOSS.com Hi Jeremy - the SLK won't have an effect on your site. It looks like you're getting a 403 as a result of something on one of your pages - a webpart? or page field control. (or a web.config file error) Can you go to http://server http://server/ and see if you get redirected to http://server/pages/default.aspx Also check the Sharepoint logs under - \12\logs (there is a 'log file' viewer under central admin to make life easier for you) Check (if you can) the IIS logs Create another site collection and see if you have the same erorr - basic team site (eliminates any non-std webparts) From first impressions it doesn't look like an auth/routing/security issue at all. (all your other sites work no probs.) Let me know how you go Mick Badran (MVP - BizTalk) | mb
RE: [OzMOSS] FW: HTTP 403 Access problems
Hi Peter, I have a really, really low-level suggestion for diagnosing the problem. Sometimes 403 issues can be caused because some underlying ACL is denying access to a key file that the site is trying to access. If this is the case, I find the utility Filemon very useful for this . The output can be immensely verbose, but you can usually filter out and examine ACCESS DENIED items reasonably quickly, some of which will be irrelevant, but one of them may be the root cause of your permissions issue. What you might expect to find is the identity under which the site is running being denied access to a file, on the basis of the ACLs applied at a file system level. Hope that may help . Cheers, Trevor From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Milliner Sent: Friday, 23 November 2007 12:09 PM To: listserver@ozMOSS.com Subject: RE: [OzMOSS] FW: HTTP 403 Access problems Clayton, Mick, I had tried this earlier but still got 403 message. Peter M. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mick Badran Sent: Friday, 23 November 2007 11:12 AM To: listserver@ozMOSS.com Subject: [OzMOSS] FW: HTTP 403 Access problems CJ - why wouldn't this sympton be across all of the sites on the box? (sharepoint web apps etc.?) _ From: [EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Clayton James [EMAIL PROTECTED] Sent: Friday, 23 November 2007 11:06 AM To: listserver@ozMOSS.com Subject: RE: [OzMOSS] FW: HTTP 403 Access problems Hi Peter This seems to be an issue with a .Net framework security update. I have seen some comments explaining the same issue as yours the only solution I have read is to remove the framework update. MSFT support said to uninstall KB928365. You'll find this in the Add/Remove programs with Show updates checked off. It's one of the .NET Framework updates. Make sure that you do the uninstall when people are off the system...you'll also need to reboot after. So far so good, no HTTP 403 errors in two weeks. Hope this helps. Clayton James Data Cogs Information Technology| Mob 0402 463 276 _ From: [EMAIL PROTECTED] on behalf of Peter Milliner Sent: Fri 23/11/2007 10:05 AM To: listserver@ozMOSS.com Subject: FW: [OzMOSS] FW: HTTP 403 Access problems From: Peter Milliner Sent: Friday, 23 November 2007 8:39 AM To: 'listserver@ozMOSS.com' Subject: Re: [OzMOSS] FW: HTTP 403 Access problems Tried the suggestion from the link below but still no luck. Still getting HTTP 403 Forbidden Page. I can create new site collection and runs OK an another site collection I had created still runs under http://server/sites/teaching just not site collection I originally created under http://servername As stated previously the only addition I have made is installing the SharePoint Learner Kit and the SharePoint Training Solutions/features Does anybody have anymore suggestions. I have checked and double checked permissions. Below is an extract from IIS logs. Can anybody get anything from these 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 - 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+. NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 2 2148074254 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 - 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+. NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET / - 80 BRITAFE\. 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+. NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 200 0 0 2007-11-22 15:38:04 W3SVC1224027985 10.1.2.120 GET /Pages/Default.aspx - 80 BRITAFE\.. 10.1.2.120 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+. NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 403 0 0 Assistance is appreciated Regards Peter Milliner From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Thake Sent: Thursday, 22 November 2007 3:00 PM To: listserver@ozmoss.com Subject: Re: [OzMOSS] FW: HTTP 403 Access problems Good link here: http://blogs.technet.com/jasbro/archive/2007/07/05/quickie-broken-web-part-p age-we-can-help.aspx On Nov 22, 2007 12:33 PM, Peter Milliner [EMAIL PROTECTED] wrote: Mick, Excuse me for being ignorant but if it is a web part how do I track down and remove or disable offending web part. I have tried permissions. Changing Application Pool account etc etc.. but still unable to access. I am also receiving message on http://server http://server/ and not being redirected. I get the same message if I put full url in with pages/default.aspx I can create other site collections from Central Admin with no problems (using team site template) Regards Peter Milliner Bendigo TAFE From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mick Badran
Re: [OzMOSS] FW: HTTP 403 Access problems
Good link here: http://blogs.technet.com/jasbro/archive/2007/07/05/quickie-broken-web-part-page-we-can-help.aspx On Nov 22, 2007 12:33 PM, Peter Milliner [EMAIL PROTECTED] wrote: Mick, Excuse me for being ignorant but if it is a web part how do I track down and remove or disable offending web part. I have tried permissions. Changing Application Pool account etc etc.. but still unable to access. I am also receiving message on http://server and not being redirected. I get the same message if I put full url in with pages/default.aspx I can create other site collections from Central Admin with no problems (using team site template) Regards Peter Milliner Bendigo TAFE *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Mick Badran *Sent:* Thursday, 22 November 2007 10:30 AM *To:* listserver@ozMOSS.com Hi Jeremy - the SLK won't have an effect on your site. It looks like you're getting a 403 as a result of something on one of your pages - a webpart? or page field control. (or a web.config file error) Can you go to http://server and see if you get redirected to http://server/pages/default.aspx Also check the Sharepoint logs under - \12\logs (there is a 'log file' viewer under central admin to make life easier for you) Check (if you can) the IIS logs Create another site collection and see if you have the same erorr - basic team site (eliminates any non-std webparts) From first impressions it doesn't look like an auth/routing/security issue at all. (all your other sites work no probs.) Let me know how you go *Mick Badran* (MVP - BizTalk) | mb: +61 404842833 | im:[EMAIL PROTECTED] Breeze Training | Training + Integration Specialist | Microsoft Readiness Instructor blogs:http://blogs.breezetraining.com.au/mickb -- *From:* [EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Jeremy Thake [EMAIL PROTECTED] *Sent:* Thursday, 22 November 2007 10:03 AM *To:* listserver@ozmoss.com *Subject:* Re: [OzMOSS] RE: HTTP 403 Access problems I actually get this when I try and hit my sharepoint hosted site via my corporate proxy. They've not been too helpful on fixing this because I have already proved it works fine via my ADSL home connection. Although it times out a lot when submitting new items. Currently looking to rehost to a more SharePoint friendly hoster...any suggestions? Sorry I know off topic... Thanks Jeremy Thake On Nov 22, 2007 6:55 AM, Aaron Saikovski [EMAIL PROTECTED] wrote: Hi Peter, I have seen this before and the way i got around it was to create a new application pool in IIS and to ensure that the service accounts I am using in central admin,SSP , site collections are correct. I had to create a new account and re-assign the services to use the newly created account and the problem went away. It worked for me and it might solve your problem. Good luck. Regards, *Aaron Saikovski* Readify - Senior Consultant M: +61 410 480 971 C: [EMAIL PROTECTED] *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Peter Milliner *Sent:* Thursday, 22 November 2007 8:40 AM *To:* listserver@ozMOSS.com *Subject:* [OzMOSS] HTTP 403 Access problems Hello All, Require some assistance with following problem – I have started getting HTTP 403 message when trying to access main portal site. I can access central admin, SSP and another top level site I have created. The only thing I can think of that could have changed configuration is that I installed SharePoint Learning Kit and Microsoft SharePoint training The message I am getting in event log is as follows: Event Type:Information Event Source:ASP.NET 2.0.50727.0 Event Category:Web Event Event ID: 1314 Date: 22/11/2007 Time: 8:26:34 AM User: N/A Computer: BSP1 Description: Event code: 4011 Event message: An unhandled access exception has occurred. Event time: 22/11/2007 8:26:34 AM Event time (UTC): 21/11/2007 9:26:34 PM Event ID: 7560c7f23f164539b36fe51dab1bfad9 Event sequence: 81 Event occurrence: 11 Event detail code: 0 Application information: Application domain: /LM/W3SVC/1224027985/Root-1-128401337765712364 Trust level: WSS_Minimal Application Virtual Path: / Application Path: C:\Inetpub\wwwroot\wss\VirtualDirectories\80\ Machine name: BSP1 Process information: Process ID: 5356 Process name: w3wp.exe Account name: BRITAFE\SP** Request information: Request URL: http://bsp1/Pages/Default.aspx Request path: /Pages/Default.aspx User host address: ** User: BRITAFE\** Is authenticated: True Authentication Type: NTLM Thread account name: BRITAFE\SP** Custom event details: For more
